Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Y3XL48lWYWNISJs4S5Zbv5EKKZU.roa
File: Y3XL48lWYWNISJs4S5Zbv5EKKZU.roa (raw, json)
Hash identifier: gasjBH3LF9P3KdejyxKgKCyYHh57bCYN0qDZ9WVsVkA=
Subject key identifier: 63:75:CB:E3:C9:56:61:63:48:48:9B:38:4B:96:5B:BF:91:0A:29:95
Certificate issuer: /CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
Certificate serial: 018CC493115381D145E4E22CFD3A21B83ACB
Authority key identifier: 02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Y3XL48lWYWNISJs4S5Zbv5EKKZU.roa
Signing time: Mon 01 Jan 2024 10:30:21 +0000
ROA not before: Mon 01 Jan 2024 10:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1064
IP address blocks: 192.76.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:11:53:81:d1:45:e4:e2:2c:fd:3a:21:b8:3a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
Validity
Not Before: Jan 1 10:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6375cbe3c956616348489b384b965bbf910a2995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:05:c1:3e:c3:53:bc:7b:80:70:b9:65:af:55:
23:e5:ff:77:33:fa:63:45:44:76:4b:2c:08:2a:f3:
b1:be:25:a2:5e:5c:8e:06:56:85:c3:32:c5:43:d6:
58:f0:1d:37:6a:64:e8:4b:09:25:e9:eb:02:0d:cd:
0b:92:60:93:ff:89:de:24:af:65:c6:a8:ff:69:6c:
d5:e1:cb:2d:03:de:40:bf:8b:a4:5a:30:37:a2:91:
67:90:a6:96:e2:15:e8:a5:97:4d:cd:44:45:48:17:
cb:ac:93:09:9c:e4:be:24:32:20:b7:ee:1e:a6:7d:
9d:2e:6c:56:60:80:13:a9:1b:3b:0a:5e:97:fe:af:
06:cb:4f:6b:e8:47:92:15:aa:02:88:7c:c0:fc:44:
60:e9:ec:9d:85:33:0d:af:cd:2c:ff:a4:82:7f:10:
ee:6b:ff:c1:77:2b:5d:b9:bf:61:e0:99:a7:b6:19:
f0:41:97:f8:9f:a5:5e:4b:fc:62:30:66:e9:77:8c:
2f:df:e6:ce:aa:e0:79:33:30:64:d9:c6:0d:ee:90:
65:2d:f8:d4:4b:84:3d:a2:5b:6c:e9:10:6d:00:0a:
0b:34:53:aa:93:dc:81:a5:43:e0:40:f6:f0:ee:ff:
61:c0:ac:13:4d:c4:c5:ff:af:0f:6d:fb:da:26:54:
b0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:75:CB:E3:C9:56:61:63:48:48:9B:38:4B:96:5B:BF:91:0A:29:95
X509v3 Authority Key Identifier:
keyid:02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Y3XL48lWYWNISJs4S5Zbv5EKKZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.76.164.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:d3:79:26:17:38:d1:32:c3:56:f2:d3:a2:68:d3:75:d9:25:
d9:22:e1:74:d0:9a:1f:ad:dd:b9:b4:95:9c:f0:1f:2d:32:09:
8c:89:d0:77:4f:9c:35:46:c7:f5:06:c7:cf:b1:39:39:e9:38:
e1:1c:1f:29:d1:30:28:0a:97:66:09:0b:a9:02:c4:72:be:5c:
4f:e7:ea:93:ef:32:74:af:2e:ba:80:df:9b:06:ea:67:54:d4:
25:a9:5a:22:93:d5:65:07:32:c6:77:2d:78:70:19:67:d5:19:
ae:4b:6f:d0:ec:aa:da:34:8c:fa:4c:3f:89:88:63:03:e5:2c:
57:cc:0d:30:14:cb:ba:47:bc:15:f5:34:b6:e8:ef:a3:dc:1b:
9c:d8:aa:43:47:68:c3:f4:f3:45:b9:78:12:67:21:0c:f2:7c:
98:44:9d:ee:ff:ea:cb:c3:76:50:af:fe:01:05:9d:31:75:4c:
dd:a3:a5:ce:49:bc:fe:a4:be:34:e1:67:b8:a4:89:da:5d:a8:
5e:d4:45:43:77:bb:6c:1e:5c:1b:f6:b8:ca:57:9e:54:ff:78:
ce:77:a8:2a:be:5f:aa:fd:ef:96:f2:27:5a:9e:1c:7b:a4:2a:
5f:e5:06:dd:56:12:14:6e:94:98:15:4e:34:02:1a:06:f3:2b:
ee:87:9f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:44 2024 by rpki-client on console.sobornost.net